General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 381 Views
  • 0 replies
  • 0 Likes

Resolved! Changing the URL for whois lookups

Hallo!  I'm trying to figure out the format of ip-address-lookup-url which defaults to http://www.networksolutions.com/whois/results.jsp?ip=  The Network Solutions site is not that useful for addresses allocated to RIPE, APNIC etc so I tried to speci

...

jojo by L0 Member
  • 3117 Views
  • 1 replies
  • 1 Likes

Is ther an OSPF issue in PAN-OS 3.1.5

Hello,

We were doing some tests on ospf, and we noticed that the firewall dont flush his ospf adjacency table even if a nheibour goes down, and this for a duration of one hour, in wich it continue to include the wrong information (concerning the gone

...

asia by L3 Networker
  • 2972 Views
  • 3 replies
  • 0 Likes

Resolved! Virtual Wire - Guide?

We have a PA-500 that's in L3 mode with a simple ethernet1/1 (trust)and ethernet1/2 (untrust) setup.

I want to add a virtual wire to do IPS inspection on traffic to a DMZ network that is currently in front of the PAN, and where it would be a lot of ef

...

Resolved! Feature Request - DNS name as source/destination

It would be very useful to use a public DNS name as a source address or destination address directly in Security Rules.  Currently, a domain/category etc.. can be blocked or allowed through the URL filter as a destination. However this can make the s

...

nrouten by Not applicable
  • 3432 Views
  • 4 replies
  • 0 Likes

More granular with Vulnerability Exceptions?

When adding a Vulnerability Exception, is there any way to make the exception more granular? (being able to add the exception along with an IP host or range, source or destination IP, zones, or virtual systems.)  For example, If I wanted to ignore a

...

jambulo by L4 Transporter
  • 3487 Views
  • 3 replies
  • 0 Likes

Recommended max user per Platform

Hi everybody,

is there an best practice or recommendation for how many users

you should take which platform?

For example:

until 200 user take a PA-500

greater 200 and less than 800 user take a PA-2020

and so on!

Kind regards

Christian

indevis by L2 Linker
  • 3058 Views
  • 2 replies
  • 0 Likes

Packet Capture instance within Details of Traffic Log

Hello,

What is the significance of the "green down arrow" packet capture within the "Details" field of the Traffic Log? We have no packet capture defined and it only shows up randomly for certain connections.  Is this an automatic output if there are

...

CRHC by L4 Transporter
  • 3067 Views
  • 2 replies
  • 0 Likes

Honeynet off of PA

Hello All,

I have just started configuring PAN 4020 for the first time - a newbie - planning to run it as virtual-wire.  However, I was informed that the FW supports hybrid routing - i.e. l2, l3; my question regards a honeynet, that I want to hang off

...

tchong64 by Not applicable
  • 2238 Views
  • 2 replies
  • 0 Likes

Resolved! SSL VPN client support - Apple iPad?

Does anyone know of a way to get an SSL VPN established with an iPad?

I've managed to make it work with XP, Windows 7 (32 and 64 bit) and OSX, but I don't think the iPad is supported.

Is this likely to be on the roadmap, or failing that is there an alt

...

dagibbs by L4 Transporter
  • 3944 Views
  • 3 replies
  • 0 Likes

Resolved! URL Group Management

Question - I have a default URL profile for all departments blocking a vast number of categories. 

I want to allow contain sites for other groups say sales, admin, IT, surveyors... 

Do I need to copy all the URLs or can I set a profile that simply ad

...

djmac by Not applicable
  • 2902 Views
  • 1 replies
  • 0 Likes

FTP slow through PA-500

Hi,

We have our PA-500 set up as follows:

Ports 1 & 2 as VWire connected to our firewall with AV and malware scanning

Ports 3 & 4 as L3 for our user traffic, scanning AV and Malware and URL filtering

When a user uses FTP to send files to servers on our D

...

lhank by L0 Member
  • 5888 Views
  • 4 replies
  • 0 Likes

eDirectory V7.3

Has anyone tried the UserID agent with V7.X?  I know its only supported from 8.8 but has anyone had a go with V7.3?

djmac by Not applicable
  • 2394 Views
  • 2 replies
  • 0 Likes

Ultrasurf blocking

Hi,

  We have PAN 500 with the firmware version of 3.1.2. It faild to identify the new version of ultrasurf (Ultrasurf version 10.02).How to identify and block the Ultrasurf by paloalto.is there any other way to block it. pls help me.

PAN Agent Settings

We are implementing the PAN User ID agent and we were wondering what everyone else was doing.. did you just leave it as the defaults?

network by L0 Member
  • 2744 Views
  • 2 replies
  • 0 Likes
  • 23837 Posts
  • 112 Subscriptions
Top Liked Authors
Labels